PT-2004-1154 · Ibm · Aix

Published 2004-01-08 · Updated 2017-07-11 · CVE-2003-0696

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AIX versions 5.1 through 5.2

Description The issue concerns the getipnodebyname() API, which fails to properly close sockets. This can be exploited by attackers to cause a denial of service through resource exhaustion.

Recommendations For AIX versions 5.1 and 5.2, consider restricting access to the getipnodebyname() API until a proper fix is available. As a temporary workaround, implement measures to monitor and limit socket usage to prevent resource exhaustion.

Fix

Related Identifiers

CVE-2003-0696

Affected Products

Aix

References · 4

• http://securityfocus.com/bid/8738 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0696 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13328 · Note
• https://techsupport.services.ibm.com/server/pseries.subscriptionSvcs?mode=7&heading=AIX51&topic=SECURITY&month=200310&label=getipnodebyname%28%29+API+does+not+close+sockets.&date=20031001&bulletin=datafile150755&embed=true · Note